Ivanti Neurons For Zero-trust Access vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Ivanti Neurons For Zero-trust Access: 2 record(s), with affected versions and fixes.cpe:2.3:a:ivanti:neurons_for_zero-trust_access
CVE-2025-0282
Critical · 9.0
KEV Urgent · 88 Public exploit Ransomware CWE-787 Jan 8, 2025
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.
CVE-2024-21893
High · 8.2
KEV Urgent · 89 Public exploit Ransomware CWE-918 Jan 31, 2024
Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.